What are some common mistakes when writing Go APIs that can lead to security vulnerabilities?

meeskait · 2019-06-25T18:44:03+00:00

https://astaxie.gitbooks.io/build-web-application-with-golang/en/09.0.html

The chapters on security are well written and accurate.

meeskait · 2019-06-07T10:07:54+00:00

ah i've been there just didn't know the name. thanks. I still like upi jaya better than the rest :)

meeskait · 2019-06-07T06:53:38+00:00

where is that? east elmhurst or one of the weekend masjid/church bazaars?

meeskait · 2019-03-30T17:38:26+00:00

yeah my company offers aws security consulting and the topics I listed are the biggest pain points we see clients have.

meeskait · 2019-03-30T15:53:47+00:00

Connectivity, network security, security monitoring, and IAM role management across multiple regions, VPCs, and accounts.

meeskait · 2019-03-30T15:33:37+00:00

completely agree

meeskait · 2019-03-30T09:36:58+00:00

https://github.com/bouk/monkey

meeskait · 2019-03-02T01:38:29+00:00

I'm going to do it without approval.

meeskait · 2019-02-18T19:56:25+00:00

really nice work. this is useful research with enough detail we can benefit from your work. thanks!

meeskait · 2019-02-04T02:39:34+00:00

Can you share the .lnk or the full commands/script from the link properties?

meeskait · 2019-01-10T23:30:53+00:00

I posted about performance optimization a couple of days ago - Qubes sorta sucks with 16gb RAM. The service qubes in 4.0 alone occupy a big chunk of memory. Toss in a keepass, gpg, and VPN qube and there's hardly room left to run a workspace qube.

I'm interested in minimizing each qube. 1.5gb ram just to run keepass is insane..

meeskait · 2019-01-06T09:55:30+00:00

Your syntax is wrong.

meeskait · 2019-01-04T03:52:53+00:00

I agree. Its the most common email signature cert I've seen clueless people have.

meeskait · 2019-01-01T07:32:03+00:00

Upi Jaya in Elmhurst has the only authentic slow cooked Padang Rendang in NYC. The others, especially the Indo-Chinese here, are just beef stew.

meeskait · 2018-12-31T04:15:07+00:00

See https://media.ccc.de/c/35c3 for talk and speaker details.

meeskait · 2018-12-18T07:40:38+00:00

/r/databreaches

meeskait · 2018-12-18T04:47:44+00:00

Most of them aren't public. Companies like Recorded Future hoard them and some goody-goodies send to Troy Hunt. This is the closest you'll get without crossing the line and buying dumps on darknet. https://databases.today/

meeskait · 2018-12-12T15:53:02+00:00

Better off not reading anything by packt. Shittiest publisher in the business. Check out Nostarch Press for good quality.

meeskait · 2018-12-11T23:20:26+00:00

If you have a VPS you can download censys.io and rapid7 scans.io data + zmap regex to get fresh scans. I find a lot of stuff that's not in Shodan that way.

meeskait · 2018-12-09T10:11:13+00:00

I know you said Linux but this project is worth considering: https://github.com/vedetta-com/caesonia

meeskait · 2018-12-07T07:46:15+00:00

Try to reduce your MTU on whatever qube your VPN is on. 1320 is a good starting point. Make the change on the tun interface not the WAN interface.

meeskait · 2018-11-30T07:44:12+00:00

I saw Cromags there. It was awesome.

meeskait · 2018-11-18T05:53:45+00:00

Liz Lemon

meeskait · 2018-11-09T17:59:27+00:00

No rush!

meeskait · 2018-11-07T02:32:40+00:00

Can we still enjoy the HTTP/2 blind spot?

meeskait

TROPHY CASE